Read the docs
TI-2020-01671 Aliases CVE-2020-1727GHSA-pw23-237p-qf6r

Improper input validation in [UNKNOWN] keycloak

Priority LOW 30CWE-20Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Low · Low · None
Fix status
Partial Red Hat: 3 fixed, 3 without a fix

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and Red Hat.

Summary

A vulnerability was found in Keycloak before 9.0.2, where every Authorization URL that points to an IDP server lacks proper input validation as it allows a wide range of characters. This flaw allows a malicious to craft deep links that introduce further attack scenarios on affected clients.

Why it matters now

EPSS 0.00801 56th percentileScored 2026-11-07
Fix Partial keycloak ([UNKNOWN]): 9.0.2Red Hat: 3 advisoriesRed Hat: 3 fixed, 3 without a fix

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
[UNKNOWN]keycloakbefore 9.0.29.0.2Patch availableCNA
  • keycloak Vendor[UNKNOWN] Affected before 9.0.2 Fixed in 9.0.2 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:redhat:keycloak:*:*:*:*:*:*:*:*before 9.0.2VulnerableRed Hat
  • cpe:2.3:a:redhat:keycloak:*:*:*:*:*:*:*:* Versions before 9.0.2 Vulnerable ·Red Hat

Remediation

  • Fix · CNA keycloak ([UNKNOWN]) Fixed in 9.0.2

Red Hat 3 advisories

  • RHSA-2020:5625 Released 2020-12-17 · Red Hat rating Moderate
    Red Hat Single Sign-On 7.4.0 security update
    • Red Hat Single Sign-On 7.4.0
  • RHSA-2020:2905 Released 2020-07-23 · Red Hat rating Important
    Red Hat build of Thorntail 2.7.0 security and bug fix update
    • Text-Only RHOAR
  • RHSA-2020:2252 Released 2020-06-01 · Red Hat rating Important
    Red Hat support for Spring Boot 2.2.6 security and bug fix update
    • Red Hat Runtimes Spring Boot 2.2.6

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Fuse 7AffectedNo fix yet
Red Hat OpenShift Application RuntimesAffectedNo fix yet
Red Hat Single Sign-On 7AffectedNo fix yet
Red Hat Runtimes Spring Boot 2.2.6Fixed RHSA-2020:2252
Red Hat Single Sign-On 7.4.0Fixed RHSA-2020:5625
Text-Only RHOARFixed RHSA-2020:2905

Timeline

  1. 2026-10-02 Threatist record created from CVE-2020-1727
  2. 2026-10-03 Alias added: GHSA-pw23-237p-qf6r

References

Advisory 1

  • TI-2024-01049 Keycloak: path transversal in redirection validation CVSS 3.1HIGH 8.1
  • TI-2023-26623 The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6… CVSS 3.1MEDIUM 5.9
  • TI-2020-08665 Server-side request forgery in keycloak CVSS 3.1MEDIUM 5.3
  • TI-2022-03468 Path traversal in Red Hat Keycloak CVSS 3.1CRITICAL 9.1
  • TI-2021-03612 A POST based reflected Cross Site Scripting vulnerability on has been identified in Keycloak. CVSS 3.1MEDIUM 6.1
  • TI-2022-03994 Cross-site scripting in keycloak CVSS 3.1CRITICAL 10.0
See all 97 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences